This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/mMU4XeLbhXJpdDenkc0Ivk-MDi8.roa File: mMU4XeLbhXJpdDenkc0Ivk-MDi8.roa (raw, json) Hash identifier: QMMxxl6fyPVIcpenT7PqBSSmMyHkr6udMWC3CqmEp8U= Subject key identifier: 98:C5:38:5D:E2:DB:85:72:69:74:37:A7:91:CD:08:BE:4F:8C:0E:2F Certificate issuer: /CN=c03c694b069da132cf4c4bd7c1d22296863b176d Certificate serial: 019B7C134701D77D330BA8CD85A962CCA6F2 Authority key identifier: C0:3C:69:4B:06:9D:A1:32:CF:4C:4B:D7:C1:D2:22:96:86:3B:17:6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wDxpSwadoTLPTEvXwdIiloY7F20.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/mMU4XeLbhXJpdDenkc0Ivk-MDi8.roa Signing time: Fri 02 Jan 2026 00:19:56 +0000 ROA not before: Fri 02 Jan 2026 00:19:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207778 IP address blocks: 2001:67c:3a0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.mft rsync://rpki.ripe.net/repository/DEFAULT/wDxpSwadoTLPTEvXwdIiloY7F20.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:47:01:d7:7d:33:0b:a8:cd:85:a9:62:cc:a6:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c03c694b069da132cf4c4bd7c1d22296863b176d Validity Not Before: Jan 2 00:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=98c5385de2db8572697437a791cd08be4f8c0e2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a7:03:43:ff:77:c8:e1:8b:6d:5d:fa:e2:49: 05:f8:04:5e:b8:32:1f:1f:72:4e:bc:54:2e:1b:9c: 5b:f0:52:5c:9b:ab:37:10:a6:29:4b:dd:a1:56:05: 4f:c9:65:d4:86:13:90:ec:ef:21:0d:64:eb:05:32: 74:81:a4:b5:6c:4c:19:a5:ef:c6:d4:2c:75:42:58: c1:0b:07:db:af:3f:35:4d:56:fe:a9:af:35:10:f6: df:73:ec:e1:ca:6b:83:0d:1e:50:11:7c:97:7a:ce: 8b:90:4e:a1:ae:ef:22:cc:e1:73:e7:fa:0f:7d:86: 1c:35:ad:2a:a8:75:bd:39:a5:40:af:75:e4:b0:18: 3b:25:86:0b:a3:5c:b9:fd:78:1f:0e:90:96:ba:4e: 16:8d:a3:f7:33:a1:6d:13:af:fa:33:07:bb:2c:d0: ba:5e:a0:8d:8a:a8:9c:b0:ca:48:ff:69:b8:19:1d: 98:0d:50:17:e1:01:83:56:24:54:6e:52:fe:b1:25: 4e:7e:cb:02:03:73:94:e5:4d:40:d9:16:56:38:ab: 52:1e:69:bf:5f:98:35:82:c0:f0:d8:05:45:06:5c: ea:97:e0:a4:b0:20:0d:20:2d:26:2d:74:da:8b:a7: 66:3f:74:8d:74:c8:f1:67:7c:fc:6d:37:2d:e6:c6: 9f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:C5:38:5D:E2:DB:85:72:69:74:37:A7:91:CD:08:BE:4F:8C:0E:2F X509v3 Authority Key Identifier: keyid:C0:3C:69:4B:06:9D:A1:32:CF:4C:4B:D7:C1:D2:22:96:86:3B:17:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDxpSwadoTLPTEvXwdIiloY7F20.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/mMU4XeLbhXJpdDenkc0Ivk-MDi8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:3a0::/48 Signature Algorithm: sha256WithRSAEncryption 5b:cb:e7:1f:f1:48:98:d4:25:68:0e:7f:b7:42:73:b1:7d:ce: 15:a7:f5:e0:4c:b1:fd:30:10:e3:a6:bc:7a:df:e1:41:0d:4f: 4b:5f:41:52:e0:3e:cd:3c:11:a6:22:9d:ac:12:e5:bd:94:c4: f7:16:8f:88:a1:f4:4b:43:7c:1d:75:5c:06:74:ae:eb:1f:47: 3f:2c:3b:af:38:1a:3c:eb:5c:9f:55:8b:c9:6d:04:53:04:00: da:a2:f2:3d:ed:d2:9a:15:cc:ec:b7:2a:63:46:7f:f4:2b:8b: 71:b8:d6:cc:3d:c6:30:42:f6:fe:a1:40:0b:ec:21:3e:e8:b6: 3e:6f:12:17:93:44:2d:0c:dc:a9:90:5b:d3:b3:bb:8d:11:d8: 07:45:02:22:62:df:e3:80:53:e4:4e:01:ae:2e:03:17:71:98: 3e:97:76:9f:94:85:74:98:12:fe:ea:03:ca:14:cb:2b:50:0b: d8:33:21:ee:98:bb:19:47:f6:d3:ac:a5:6c:6a:41:21:39:16: 95:20:03:c7:04:d5:23:f8:a4:74:66:1b:6b:6f:f2:29:e9:02: db:56:00:45:97:81:fa:91:e8:71:55:5e:d7:ff:33:ef:75:c9: 51:fc:e2:ff:ba:9b:8f:cf:63:3c:ed:07:c6:c5:f2:81:10:a3: f8:3b:c6:db -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8E0cB130zC6jNhalizKbyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwM2M2OTRiMDY5ZGExMzJjZjRjNGJkN2MxZDIyMjk2ODYz YjE3NmQwHhcNMjYwMTAyMDAxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OGM1Mzg1ZGUyZGI4NTcyNjk3NDM3YTc5MWNkMDhiZTRmOGMwZTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtacDQ/93yOGLbV364kkF+AReuDIf H3JOvFQuG5xb8FJcm6s3EKYpS92hVgVPyWXUhhOQ7O8hDWTrBTJ0gaS1bEwZpe/G 1Cx1QljBCwfbrz81TVb+qa81EPbfc+zhymuDDR5QEXyXes6LkE6hru8izOFz5/oP fYYcNa0qqHW9OaVAr3XksBg7JYYLo1y5/XgfDpCWuk4WjaP3M6FtE6/6Mwe7LNC6 XqCNiqicsMpI/2m4GR2YDVAX4QGDViRUblL+sSVOfssCA3OU5U1A2RZWOKtSHmm/ X5g1gsDw2AVFBlzql+CksCANIC0mLXTai6dmP3SNdMjxZ3z8bTct5safFQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJjFOF3i24VyaXQ3p5HNCL5PjA4vMB8GA1UdIwQY MBaAFMA8aUsGnaEyz0xL18HSIpaGOxdtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0R4cFN3YWRvVExQVEV2WHdkSWlsb1k3RjIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9hNGY0YzItZWUzNS00M2UwLThiYWQt NDRkMGQwODkxOTg5LzEvbU1VNFhlTGJoWEpwZERlbmtjMEl2ay1NRGk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9hNGY0YzItZWUzNS00M2UwLThiYWQtNDRkMGQwODkxOTg5 LzEvd0R4cFN3YWRvVExQVEV2WHdkSWlsb1k3RjIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAOg MA0GCSqGSIb3DQEBCwUAA4IBAQBby+cf8UiY1CVoDn+3QnOxfc4Vp/XgTLH9MBDj prx63+FBDU9LX0FS4D7NPBGmIp2sEuW9lMT3Fo+IofRLQ3wddVwGdK7rH0c/LDuv OBo861yfVYvJbQRTBADaovI97dKaFczstypjRn/0K4txuNbMPcYwQvb+oUAL7CE+ 6LY+bxIXk0QtDNypkFvTs7uNEdgHRQIiYt/jgFPkTgGuLgMXcZg+l3aflIV0mBL+ 6gPKFMsrUAvYMyHumLsZR/bTrKVsakEhORaVIAPHBNUj+KR0Zhtrb/Ip6QLbVgBF l4H6kehxVV7X/zPvdclR/OL/upuPz2M87QfGxfKBEKP4O8bb -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:43 2026 by rpki-client